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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the application: 
Listing of Claims: 

1. (Currently Amended) An apparatus comprising a machine readable memory that 

provides instructions for us e in e ncryption or d e cryption , for solving a system of linear 
equations Ax=b in n unknowns on a finite field GF(p), where p is a prime, n is a positive 
integer, A is a coefficient matrix consisting of elements of n rows and n columns, x is a 
vector of unknowns consisting of n elements, and b is a constant vector consisting of n 
elements, th e apparatus comprisin g which when executed by a machine, cause said 
machine to perform operations comprising : 

param e t e r storing m e ans for storing th e co e ffici e nt matrix A and th e constant v e ctor b\ 

triangular transforming m e ans for reading the a stored coefficient matrix A and the a 
stored constant vector b from th e param e t e r storing m e ans , and triangular 
transforming the read coefficient matrix A and constant vector b to generate a 
coefficient matrix C and a constant vector d for a system of linear equations Cx=d 
in n unknowns that is equivalent to the system of linear equations Ax=b, the 
coefficient matrix C consisting of elements of n rows and n columns and the 
constant vector d consisting of n elements , wh e r e in th e co e ffici e nt matrix A is 
triangular transform e d into the co e ffici e nt matrix C of upp e r triangular form 
without diagonal e l e m e nts of th e co e ffici e nt matrix A b e ing chang e d to 7 ; 

diagonal e l e m e nt inv e rting m e ans for calculating inverses of diagonal elements of the 
generated coefficient matrix C on the finite field GF(p)\ and 

e quation computing m e ans for solving the system of linear equations Cx=d using the 

generated coefficient matrix C, the generated constant vector d, and the calculated 
inverses of the diagonal elements of the generated coefficient matrix C, to thereby 
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solve the system of linear equations Ax=b of the read coefficient matrix A and the 
read constant vector b: wherein 

the coefficient matrix A is triangular transformed into the coefficient matrix C of upper 
triangular form without a division on the finite field GF(p) being performed . 

2. (Currently Amended) The apparatus of Claim 1, wherein; 

the triangular transforming m e ans p e rforms on e or mor e s ucc e ssiv e transformation 

proc e ss e s to g e n e rat e generating the coefficient matrix C and the constant vector d 
of the system of linear equations Cx=d from the coefficient matrix A and the 
constant vector b of the system of linear equations Ax=b includes one or more 
successive transformation processes:|" [,H 

the system of linear equations Ax=b is subjected to the first transformation process and 
the system of linear equations Cx=d is generated as a result of the last 
transformation process; 

wh e r e in in each transformation process,, th e triangular transforming m e ans transforms a 
coefficient matrix and a constant vector of a system of linear equations in n 
unknowns[[J] are transformed into a coefficient matrix and a constant vector of a 
system of linear equations in n unknowns that is equivalent to the system of linear 
equations before the transformation; , wh e r e th e syst e m of lin e ar e quations Ax~b 
is subj e ct e d to th e first transformation proc e ss and th e syst e m of lin e ar e quations 
Cx~d is g e n e rat e d as a r e sult of the last transformation proc e ss, 

wh e r e in in each transformation procesSi th e syst e m of lin e ar e quations in n unknowns 
that is subj e ct e d to th e transformation includ e s one pivotal equation which is a 
linear equation in n unknowns serving as a pivot for the transformation and one or 
more object equations which are linear equations in n unknowns to be 
transformed are chosen from the system of linear equations in n unknowns that is 
subjected to the transformation; 
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each transformation process has a same number of transformation subprocesses as the 
one or more object equations, each for transforming a separate one of the one or 
more object equations into an equation equivalent to the object equation; and 

in each transformation subprocess, 

(a) each of the coefficients and a constant in the pivotal equation is multiplied by 

a nonzero coefficient chosen from the object equation, and values 
generated as a result of the multiplications are set into a second coefficient 
group, 

(b) each of coefficients and a constant in the object equation is multiplied by a 

nonzero coefficient chosen from the pivotal equation, and values 
generated as a result of the multiplications are set into a first coefficient 
group, and 

(c) the values in the second coefficient group are subtracted respectively from the 

values in the first coefficient group, and differences generated as a result 
of the subtractions are respectively set as coefficients and a constant in the 
equation equivalent to the object equation. 

, and th e triangular transforming m e an s transforms e ach of th e obj e ct e quations into an 
e quation e quival e nt to th e obj e ct e quation by 

d e fining a first co e ffici e nt group containing at l e ast on e valu e r e lat e d to th e 

pivotal e quation and a s e cond co e ffici e nt group containing n+1 valu e s 
relat e d to th e pivotal e quation, 

changing a nonz e ro co e ffici e nt in th e obj e ct e quation to 0, and 

multiplying e ach of a constant and n co e ffici e nts in th e obj e ct e quation by th e 
valu e in th e first co e fficient group, and subtracting th e m+7 valu e s in the 
s e cond co e ffici e nt group r es p e ctiv e ly from th e n+ 1 multiplication r e sults , 

3. (Cancelled) 
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4. (Currently Amended) The apparatus of Claim [[3]] 2, wherein 

when the diagonal elements of the coefficient matrix C are denoted by m\ (i=l,2, ...,n) 

and the inverses of the diagonal elements mi (7=7,2, ...,n) in the finite field GF(p) 
are denoted by /, (7=7,2,. . . ,n) y th e diagonal e l e m e nt inverting m e ans calculating 
inverses of diagonal elements of the coefficient matrix C includes 

(a) a multiplying unit for computin g values t and U where 

n 

t i = Y\ m k ( exce Pt m i) m °d p (i=l,2,. . . ,n) 

k=\ 

and 

n 

t =Yl m k m °dp 

(b) a first inv e rting unit for computing u where 
u=l/t mod p 

and 

(c) a s e cond inverting unit for computing values h where 
Ii=uxti mod p (i~l t 2 s ... t n) 

to find the inverses 7, (i=l,2, ...,n). 

5. (Currently Amended) The apparatus of Claim 4, 

wherein th e multiplying unit calculat e s computing the values / and t§_ includes calculating 
Sj=mjxm2 modp 
S2-Sjxm3 mod p 

s n .3=s n -4xm n -2 mod p 
in the stated order, then calculat e s calculating 
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tn^SnSXMn-l mod p 

t n .}=s n -3>m n modp 
s n =m n .ixm n modp 

t n -2=S n .4XSn mod p 

s n -i=m n -2><s n modp 

t n -3=S n . 5 XSn-l mod p 

s n -2=m n -3xs n -i modp 
t n . 4 =s n . 6 xs n -2 mod p 

Ss=m4xs 6 modp 
t3=sjxs 5 modp 
S4=ni3xs 5 mod p 
t2=mjxs4 mod p 
tj~m2XS4 mod p 
in the stated order, and lastly calculat e s calculating 
t=tjxmj 

for a value j chosen from a set of positive integers {l,2,...,n}. 

6. (Currently Amended) The apparatus of Claim [[2]] 1 wherein: 

generating the coefficient matrix C and the constant vector d of the system of linear 
equations Cx=d from the coefficient matrix A and the constant vector b of the 
system of linear equations Ax=b includes one or more successive transformation 
processes; 
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the system of linear equations Ax-b is subjected to the first transformation process and 
the system of linear equations Cx=d is generated as a result of the last 
transformation process; 

in each transformation process, a coefficient matrix and a constant vector of a system of 
linear equations in n unknowns are transformed into a coefficient matrix and a 
constant vector of a system of linear equations in n unknowns that is equivalent to 
the system of linear equations before the transformation: 

in each transformation process, one pivotal equation which is a linear equation in n 
unknowns serving as a pivot for the transformation and one or more object 
equations which are linear equations in n unknowns to be transformed are chosen 
from the system of linear equations in n unknowns that is subjected to the 
transformation; 

each transformation process has a coefficient group calculation process and a same 

number of transformation subprocesses as the one or more object equations, the 
transformation subprocesses being performed following the coefficient group 
calculation process and being each for transforming a separate one of the one or 
more object equations; 

in the coefficient group calculation process, 

fa) a nonzero coefficient is chosen from each of the pivotal equation and the one 
or more object equations, a product is calculated for each of the pivotal 
equation and the one or more object equations by multiplying together all 
chosen nonzero coefficients except a nonzero coefficient chosen from the 
equation, and products calculated respectively for the pivotal equation and 
the one or more object equations are set into a first coefficient group, and 

(b) each of coefficients and a constant in the pivotal equation except a nonzero 
coefficient chosen from the pivotal equation in the coefficient group 
calculation process is multiplied by a product in the first coefficient group 
calculated for the pivotal equation, and values generated as a result of the 
multiplications are set into a second coefficient group; and 
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in each transformation subprocess for transforming a separate one of the one or more 
object equations, 

(a) a nonzero coefficient chosen from the object equation in the coefficient group 

calculation process is changed to 0 as a new coefficient, 

(b) each of coefficients in the object equation except the nonzero coefficient 

chosen from the object equation is multiplied by a product in the first 
coefficient group calculated for the object equations, values in the second 
coefficient group calculated from the coefficients in the pivotal equation 
are subtracted respectively from values generated as a result of the 
multiplications on the coefficients in the object equation to generate 
differences, and the coefficients in the object equation are changed 
respectively to the differences as new coefficients, and 

(c) a constant in the object equation is multiplied by the product calculated for the 

object equations, a value in the second coefficient group calculated from 
the constant in the pivotal equation is subtracted from a value generated as 
a result of the multiplication on the constant in the object equation to 
generate a difference, and the constant in the object equation is changed to 
the difference as a new constant. 

, wh e r e in e ach transformation proc e ss has a co e ffici e nt group calculation proc e ss and 
transformation subproc e ss e s, p e rform e d following th e co e ffici e nt group 
calculation proc e ss, e ach for transforming a s e parat e on e of th e obj e ct e quation s , 

wh e r e in in th e co e ffici e nt group calculation proc e ss th e triangular transforming m e ans 

(a) choos e s m nonz e ro co e fficients by talcing on e nonz e ro co e ffici e nt from 

e ach of th e pivotal e quation and th e obj e ct e quations, multipli e s e ach 
combination of (m - 1) of th e chos e n nonz e ro co e ffici e nts, and sets th e m 
multiplication r e sults into th e first co e ffici e nt group, m b e ing a positive 
int e g e r no small e r than 2, and 

(b) multipli e s e ach of a constant and n co e ffici e nts in th e pivotal e quation by a 

multiplication r e sult in th e first co e ffici e nt group for a combination of 
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nonz e ro co e ffici e nts that do e s not includ e a nonz e ro coefficient choson 
from th e pivotal e quation, and s e ts n+7 valu e s obtain e d by the 
multiplications into th e s e cond co e ffici e nt group, and 

wh e r e in in e ach of th e transformation subproc e ss e s following th e co e ffici e nt group 
calculation proc e ss, th e triangular tran s forming m e ans 

(a) chang e s a nonz e ro co e ffici e nt chos e n from th e obj e ct e quation in th e 

co e ffici e nt group calculation proc e ss, to 0 in th e obj e ct e quation, and 

(b) multipli e s e ach of a constant and n co e ffici e nts in th e obj e ct e quation by a 

multiplication result in th e first co e ffici e nt group for a combination of 
nonz e ro co e ffici e nts that do e s not includ e th e nonz e ro co e ffici e nt chos e n 
from th e obj e ct e quation, and subtracts th e n+l valu e s in th e s e cond 
co e ffici e nt group r e sp e ctiv e ly from th e «+7 multiplication r e sults. 

7. (Currently Amended) The apparatus of Claim [[6]] 2, 

wherein when the diagonal elements of the coefficient matrix C are denoted by mj 

(7=7,2, ...,n) and the inverses of the diagonal elements m\ (i=l,2, ...,n) in the finite 
field GF(p) are denoted by Ii (i=l t 2,...,n) , th e diagonal e l e m e nt inv e rting m e ans 
calculating inverses of diagonal elements of the coefficient matrix C includes 

(a) a multiplying unit for computing values t and where 

n 

t i = Y\ m k (except m$ mod p (i=l,2 t . . . ,n) 



k=\ 



and 



/ = modp 



(b) a first inv e rting unit for computing a value u where 
u=\lt modp 

and 
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(c) a second inv e rting unit for computing values L where 

Ij=uxtj mod p (/=l,2,...,n) 
to find the inverses 7} (i=l,2 9 ...,n). 

8. (Currently Amended) The apparatus of Claim 7, 

wherein th e multiplying unit calculat e s computing values t and ^includes calculating 
S\=m\xm2 mod p 
S2=sixms mod p 

s n .3=s n -4xm n .2 modp 
in the stated order, then calculat e s calculating 

t n =Sn-3Xm n -l mod p 
t n -i=Sn-3><M n modp 
S n = Mn-l Wiod p 
t n -2-Sn-4><Snmodp 

s n -i=m n .2xs n modp 

tn-3=Sn-5XS n -i mod p 

s n -2=m n -3xs n -i modp 

t n -4=Sn-6><Sn-2 mod p 

S5=m4xs6 modp 
t3=sixs5 modp 
S4=m3XS5 modp 
t2=mjxs 4 modp 
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t}=m2><S4 mod p 

in the stated order, and lastly calculat e s calculating 

t-tjxmj 

for a value j chosen from a set of positive integers {1,2, ...,n }. 

9. (Currently Amended) An apparatus for us e in e ncryption or d e cryption, for computing 
an inverse / of an element^ in GF(q) which is an extension field of a finite field GF(p), 
where p is a prime, q=p n 9 and n is a positive integer, the apparatus comprising: 

equation generating means for generating a coefficient matrix A and a constant vector b 
for a system of linear equations Ax=b in n unknowns, using the element y and all 
coefficients of a generator polynomial of GF(q) whose root is a; 

equation solving means for finding solutions xu (k=0. L 2 n-1) of the system of linear 

equations Ax=b, the equation solving means including 

the apparatus of Claim 1 ; and 

inverse computing means for computing the inverse L /=X / ?+x^a+ ... +x n i ia n ~ 1 , using the 

root a and the solutions Xk (k=0 t L 2 n-1) found by the equation solving 

means. 

10. (Currently Amended) An apparatus for us e in e ncryption or d e cryption, for computing 
an inverse / of an element y in GF(q) which is an extension field of a finite field GF(p), 
where p is a prime, q=p n , and n is a positive integer, the apparatus comprising: 

equation generating means for generating a coefficient matrix A and a constant vector b 
for a system of linear equations Ax=b in n unknowns, using the element^ and all 
coefficients of a generator polynomial of GF(q) whose root is a\ 

equation solving means for finding solutions xu (k=0. 7. 2 n L l) of the system of linear 

equations Ax=b, the equation solving means including the apparatus of Claim 2; 
and 
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inverse computing means for computing the inverse L 7=Xfl+;t / a+ ... H-x^a"" 7 , using the 

root a and the solutions Xk (k=0 t 1, 2 n-1) found by the equation solving 

means. 

1 1 . (Currently Amended) An apparatus for us e in e ncryption or d e cryption, for computing 
an inverse / of an element^ in GF(q) which is an extension field of a finite field GF(p), 
where p is a prime, q=p n 9 and n is a positive integer, the apparatus comprising: 

equation generating means for generating a coefficient matrix A and a constant vector b 
for a system of linear equations Ax=b in n unknowns, using the element y and all 
coefficients of a generator polynomial of GF(q) whose root is a; 

equation solving means for finding solutions ^ (k=0, 7, 2 n-1) of the system of linear 

equations Ax=b, the equation solving means including the apparatus of Claim 3; 
and 

inverse computing means for computing the inverse L ^xn+xia+.-.+x^a ' , using the 

root a and the solutions Xk (k=0, L 2 n-1) found by the equation solving 

means. 

12. (Currently Amended) An apparatus for u se in encryption or d e cryption, for computing 
an inverse I of an element .y in GF(q) which is an extension field of a finite field GF(p), 
where p is a prime, q=p n , and n is a positive integer, the apparatus comprising: 

equation generating means for generating a coefficient matrix A and a constant vector b 
for a system of linear equations Ax=b in n unknowns, using the element^ and all 
coefficients of a generator polynomial of GF(q) whose root is a; 

equation solving means for finding solutions Xk (k=0 t 1.2 n-1) of the system of linear 

equations Ax=b 9 the equation solving means including the apparatus of Claim 4; 
and 

inverse computing means for computing the inverse L 7=JCo+x / a+... +x n z ia n ~ J , using the 

root a and the solutions xt fk=0. L2 n-lY found by the equation solving 

means. 
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13. (Currently Amended) An apparatus for us e in e ncryption or decryption, for computing 
an inverse I of an element y in GF(q) which is an extension field of a finite field GF(p) 9 
where p is a prime, q=p n , and n is a positive integer, the apparatus comprising: 

equation generating means for generating a coefficient matrix A and a constant vector b 
for a system of linear equations Ax=b in n unknowns, using the element y and all 
coefficients of a generator polynomial of GF(q) whose root is a; 

equation solving means for finding solutions Xk (k=0. L 2 n-1) of the system of linear 

equations Ax=b, the equation solving means including the apparatus of Claim 5; 
and N 

inverse computing means for computing the inverse L /=Xfl+x/a+...+x„ w a"~ / . using the 

root a and the solutions xu (Tc=0, L 2 n-1) found by the equation solving 

means. 

14. (Currently Amended) An apparatus for us e in e ncryption or d e cryption, for computing 
an inverse I of an element^ in GF(q) which is an extension field of a finite field GF(p), 
where p is a prime, q=p n , and n is a positive integer, the apparatus comprising: 

equation generating means for generating a coefficient matrix A and a constant vector b 
for a system of linear equations Ax=b in n unknowns, using the element y and all 
coefficients of a generator polynomial of GF(q) whose root is a\ 

equation solving means for finding solutions Xk (k=0, L 2 n-1) of the system of linear 

equations Ax-b, the equation solving means including the apparatus of Claim 6; 
and 

inverse computing means for computing the inverse L I=xn+xia+ ... +x n z ia n ~ 1 , using the 

root a and the solutions x ^ (k=0, L 2 n-1) found by the equation solving 

means. 

15. (Currently Amended) An apparatus for us e in e ncryption or d e cryption, for computing 
an inverse I of an element >> in GF(q) which is an extension field of a finite field GF(p), 
where p is a prime, q=p n and n is a positive integer, the apparatus comprising: 
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equation generating means for generating a coefficient matrix A and a constant vector b 
for a system of linear equations Ax=b in n unknowns, using the element^ and all 
coefficients of a generator polynomial of GF(q) whose root is a\ 

equation solving means for finding solutions (Tc=0, 7, 2 n-1) of the system of linear 

equations Ax=b 9 the equation solving means including the apparatus of Claim 7; 
and 

inverse computing means for computing the inverse L I=xn+xi<z+ ... +x^ j a n ~ 1 . using the 

root a and the solutions Xk (k=0, 7, 2 n-1) found by the equation solving 

means. 

16. (Currently Amended) An apparatus for use in e ncryption or d e cryption, for computing 
an inverse I of an element y in GF(q) which is an extension field of a finite field GF(p), 
where p is a prime, q=p n , and n is a positive integer, the apparatus comprising: 

equation generating means for generating a coefficient matrix A and a constant vector b 
for a system of linear equations Ax=b in n unknowns, using the element^ and all 
coefficients of a generator polynomial of GF(q) whose root is a; 

equation solving means for finding solutions x ^ (k=0. 7. 2 n-1) of the system of linear 

equations Ax-b y the equation solving means including the apparatus of Claim 8; 
and 

inverse computing means for computing the inverse L I=xn+ Jc^aH- ... +x n z ia n ~ 1 t using the 

root a and the solutions Xk (k=0, 7, 2 n-1) found by the equation solving 

means. 

17. (Currently Amended) A record medium reproducing apparatus for computing, when 
copyrighted digital content has been encrypted using a discrete logarithm problem on an 
elliptic curve E over GF(q) as a basis for security and recorded on a record medium, an 
inverse / of an element >> in GF(q) to decrypt the encrypted digital content recorded on 
the record medium, where GF(q) is an extension field of a finite field GF(p),p is a prime, 
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q=p n , n is a positive integer, and G is a base point of the elliptic curve E, the record 
medium reproducing apparatus comprising: 

equation generating means for generating a coefficient matrix A and a constant vector b 
for a system of linear equations Ax=b in n unknowns, using the element^ and all 
coefficients of a generator polynomial of GF(q) whose root is a\ 

equation solving means for finding solutions Xk (k=0, 7. 2 n-l) of the system of linear 

equations Ax=b, the equation solving means including the apparatus of Claim 1 ; 
and 

inverse computing means for computing the inverse L I=xn+xia+... -\-x l L j a n ' 1 t using the 

root a and the solutions Xk (k=0, L 2 n-l) found by the equation solving 

means. 

18. (Currently Amended) A record medium reproducing apparatus for computing, when 
copyrighted digital content has been encrypted using a discrete logarithm problem on an 
elliptic curve E over GF(q) as a basis for security and recorded on a record medium, an 
inverse / of an element >> in GF(q) to decrypt the encrypted digital content recorded on 
the record medium, where GF(q) is an extension field of a finite field GF(p) 9 p is a prime, 
q=p n 9 n is a positive integer, and G is a base point of the elliptic curve E, the record 
medium reproducing apparatus comprising: 

equation generating means for generating a coefficient matrix A and a constant vector b 
for a system of linear equations Ax=b in n unknowns, using the element^ and all 
coefficients of a generator polynomial of GF(q) whose root is a\ 

equation solving means for finding solutions Xk (k=0, 7, 2 n-l) of the system of linear 

equations Ax=b y the equation solving means including the apparatus of Claim 2; 
and 

inverse computing means for computing the inverse L I=xn+xia+... using the 

root a and the solutions Xk fk=0. 7. 2 n-l) found by the equation solving 

means. 
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19. (Currently Amended) A record medium reproducing apparatus for computing, when 
copyrighted digital content has been encrypted using a discrete logarithm problem on an 
elliptic curve E over GF(q) as a basis for security and recorded on a record medium, an 
inverse / of an element y in GF(q) to decrypt the encrypted digital content recorded on 
the record medium, where GF(q) is an extension field of a finite field GF(p),p is a prime, 
q=p n , n is a positive integer, and G is a base point of the elliptic curve £, the record 
medium reproducing apparatus comprising: 

equation generating means for generating a coefficient matrix A and a constant vector b 
for a system of linear equations Ax=b in n unknowns, using the element;; and all 
coefficients of a generator polynomial of GF(q) whose root is a; 

equation solving means for finding solutions xt (k=0 t L 2 n-1) of the system of linear 

equations Ax=b y the equation solving means including the apparatus of Claim 3; 
and 

inverse computing means for computing the inverse L /=Xrt+x/a+...+x„ 1 / a ' . using the 

root a and the solutions jc* (k=0, 7, 2 n-1) found by the equation solving 

means. 

20. (Currently Amended) A record medium reproducing apparatus for computing, when 
copyrighted digital content has been encrypted using a discrete logarithm problem on an 
elliptic curve E over GF(q) as a basis for security and recorded on a record medium, an 
inverse / of an element;; in GF(q) to decrypt the encrypted digital content recorded on 
the record medium, where GF(q) is an extension field of a finite field GF(p),p is a prime, 
q=p n , w is a positive integer, and G is a base point of the elliptic curve £, the record 
medium reproducing apparatus comprising: 

equation generating means for generating a coefficient matrix A and a constant vector b 
for a system of linear equations Ax=b in n unknowns, using the element^ and all 
coefficients of a generator polynomial of GF(q) whose root is a\ 
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equation solving means for finding solutions xu (k=0. L 2 n-1) of the system of linear 

equations Ax=b, the equation solving means including the apparatus of Claim 4; 
and 

inverse computing means for computing the inverse L I=xn+xia+.„ +x^ia n '\ using the 

root a and the solutions xu (k=0, L 2 n-1) found by the equation solving 

means. 



2 1 . (Currently Amended) A record medium reproducing apparatus for computing, when 
copyrighted digital content has been encrypted using a discrete logarithm problem on an 
elliptic curve E over GF(q) as a basis for security and recorded on a record medium, an 
inverse I of an element y in GF(q) to decrypt the encrypted digital content recorded on 
the record medium, where GF(q) is an extension field of a finite field GF(p) y p is a prime, 
<7=/A /? is a positive integer, and G is a base point of the elliptic curve £, the record 
medium reproducing apparatus comprising: 

equation generating means for generating a coefficient matrix A and a constant vector b 
for a system of linear equations Ax~b in n unknowns, using the element y and all 
coefficients of a generator polynomial of GF(q) whose root is a\ 

equation solving means for finding solutions x ^ fk=0, 7, 2 n-1) of the system of linear 

equations Ax=b, the equation solving means including the apparatus of Claim 5; 
and 

inverse computing means for computing the inverse L I=xn+xia+ ... +x r ?: j a n ~ I . using the 

root a and the solutions xu (k=0 t L 2 n-1) found by the equation solving 

means. 

22. (Currently Amended) A record medium reproducing apparatus for computing, when 
copyrighted digital content has been encrypted using a discrete logarithm problem on an 
elliptic curve E over GF(q) as a basis for security and recorded on a record medium, an 
inverse I of an element^ in GF(q) to decrypt the encrypted digital content recorded on 
the record medium, where GF(q) is an extension field of a finite field GF(p),p is a prime, 
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q=p n , n is a positive integer, and G is a base point of the elliptic curve E, the record 
medium reproducing apparatus comprising: 

equation generating means for generating a coefficient matrix A and a constant vector b 
for a system of linear equations Ax~b in n unknowns, using the element^ and all 
coefficients of a generator polynomial of GF(q) whose root is a; 

equation solving means for finding solutions Xk (Tc=0. L 2 n-l) of the system of linear 

equations Ax=b, the equation solving means including the apparatus of Claim 6; 
and v 

inverse computing means for computing the inverse L I=xa+x L a+ . . . +x n z ia n ~ J t using the 

root a and the solutions Xk (k=0, L 2 n-l) found by the equation solving 

means. 

23. (Currently Amended) A record medium reproducing apparatus for computing, when 
copyrighted digital content has been encrypted using a discrete logarithm problem on an 
elliptic curve E over GF(q) as a basis for security and recorded on a record medium, an 
inverse / of an element y in GF(q) to decrypt the encrypted digital content recorded on 
the record medium, where GF(q) is an extension field of a finite field GF(p) y p is a prime, 
q ss p n 9 n is a positive integer, and G is a base point of the elliptic curve £, the record 
medium reproducing apparatus comprising: 

equation generating means for generating a coefficient matrix A and a constant vector b 
for a system of linear equations Ax=b in n unknowns, using the element^ and all 
coefficients of a generator polynomial of GF(q) whose root is a\ 

equation solving means for finding solutions xu fk=0. L 2 n-l) of the system of linear 

equations Ax=b, the equation solving means including the apparatus of Claim 7; 
and 

inverse computing means for computing the inverse L I=xa+xia+... +jc„ -/ a " . using the 

root a and the solutions Xk (k=0, 7, 2 n-l) found by the equation solving 

means. 
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24. (Currently Amended) A record medium reproducing apparatus for computing, when 
copyrighted digital content has been encrypted using a discrete logarithm problem on an 
elliptic curve E over GF(q) as a basis for security and recorded on a record medium, an 
inverse / of an element^ in GF(q) to decrypt the encrypted digital content recorded on 
the record medium, where GF(q) is an extension field of a finite field GF(p),p is a prime, 
q=p n , n is a positive integer, and G is a base point of the elliptic curve E, the record 
medium reproducing apparatus comprising: 

equation generating means for generating a coefficient matrix A and a constant vector b 
for a system of linear equations Ax=b in n unknowns, using the element^ and all 
coefficients of a generator polynomial of GF(q) whose root is a; 

equation solving means for finding solutions xt (k=0, L 2 n-1) of the system of linear 

equations Ax=b, the equation solving means including the apparatus of Claim 8; 
and 

inverse computing means for computing the inverse L 7=xg+x / a+... +Xg -/ a fM \ using the 

root a and the solutions Xk (k=0, L 2 n-1) found by the equation solving 

means. 

25. (Currently Amended) A machine based method for solving a system of linear equations 
Ax=b in n unknowns on a finite field GF(p) where p is a prime, n is a positive integer, A 
is a coefficient matrix consisting of elements of n rows and n columns, x is a vector of 
unknowns consisting of n elements, and b is a constant vector consisting of n elements, 
for us e in e ncryption or d e cryption in an apparatus e quipp e d with param e t e r storing 
m e ans which stor e s th e co e ffici e nt matrix ;4 and th e constant v e ctor 6, the method 
comprising: 

utilizing a machine readable memory to provide instructions to a machine for execution 
by the machine, wherein 

the instructions, when executed by the machine, cause the machine to perform operations 
comprising: 
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a triangular transforming st e p for reading the a stored coefficient matrix A and the a 
stored constant vector b from th e param e t e r storing m e ans , and triangular 
transforming the read coefficient matrix A and constant vector b to generate a 
coefficient matrix C and a constant vector d for a system of linear equations Cx=d 
in n unknowns that is equivalent to the system of linear equations Ax=b, the 
coefficient matrix C consisting of elements of n rows and n columns and the 
constant vector d consisting of n elements , wh e r e in th e co e ffici e nt matrix A is 
triangular transform e d into th e co e ffici e nt matrix C of upp e r triangular form 
without diagonal e l e m e nts of th e co e ffici e nt matrix A b e ing chang e d to 1 ; 

a diagonal e l e m e nt inverting st e p for calculating inverses of diagonal elements of the 
generated coefficient matrix C on the finite field GF(p)\ and 

an e quation computing st e p for solving the system of linear equations Cx=d using the 

generated coefficient matrix C, the generated constant vector d, and the calculated 
inverses of the diagonal elements of the generated coefficient matrix C, to thereby 
solve the system of linear equations Ax-bi of the read coefficient matrix A and the 
read constant vector b % wherein 

the coefficient matrix A is triangular transformed into the coefficient matrix C of upper 
triangular form without a division on the finite field GF(p) being performed . 

26. (Currently Amended) The method of Claim 25, whereim 

the triangular transforming st e p includ e s one or mor e succ e ssiv e transformation proc e ss e s 
to g e n e rat e generating the coefficient matrix C and the constant vector d of the 
system of linear equations Cx=d from the coefficient matrix A and the constant 
vector b of the system of linear equations Ax=b includes one or more successive 
transformation processes; 

the system of linear equations Ax=b is subjected to the first transformation process and 
the system of linear equations Cx=d is generated as a result of the last 
transformation process . 
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wh e rein in each transformation procesSi a coefficient matrix and a constant vector of a 
system of linear equations in n unknowns are transformed into a coefficient 
matrix and a constant vector of a system of linear equations in n unknowns that is 
equivalent to the system of linear equations before the transformation , wher e th e 
syst e m of lin e ar e quations iix~b is subj e ct e d to th e first transformation process 
and th e s yst e m of lin e ar e quations Cx~d is g e n e rat e d as a r e sult of th e last 
transformation proc es s, 

wh e r e in in each transformation process^ th e syst e m of lin e ar e quations in n unknowns 
that is subj e ct e d to th e transformation includ e s one pivotal equation which is a 
linear equation in n unknowns serving as a pivot for the transformation and one or 
more object equations which are linear equations in n unknowns to be 
transformed are chosen from the system of linear equations in n unknowns that is 
subjected to the transformation; 

each transformation process has a same number of transformation subprocesses as the 
one or more object equations, each for transforming a separate one of the one or 
more object equations into an equation equivalent to the object equation: and 

in each transformation subprocess, 

(a) each of the coefficients and a constant in the pivotal equation is multiplied by 

a nonzero coefficient chosen from the object equation, and values 
generated as a result of the multiplications are set into a second coefficient 
group, 

(b) each of coefficients and a constant in the object equation is multiplied by a 

nonzero coefficient chosen from the pivotal equation, and values 
generated as a result of the multiplications are set into a first coefficient 
group, and 

(c) the values in the second coefficient group are subtracted respectively from the 

values in the first coefficient group, and differences generated as a result 
of the subtractions are respectively set as coefficients and a constant in the 
equation equivalent to the object equation. 
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, and e ach of th e obj e ct e quations is transform e d into an e quation e quival e nt to th e object 
e quation by 

d e fining a first co e ffici e nt group containing at l e ast on e valu e r e lated to the pivotal 
e quation and a se cond co e ffici e nt group containing n+1 valu e s r e lat e d to th e 
pivotal e quation, 

changing a nonz e ro co e ffici e nt in th e obj e ct e quation to 0, and 

. multiplying e ach of a constant and n co e ffici e nts in th e obj e ct e quation by th e valu e in th e 
first co e ffici e nt group, and subtracting th e n+ 7 valu e s in th e s e cond co e ffici e nt 
group r e sp e ctiv e ly from the «+7 multiplication results. 

27. (Cancelled) 

28. (Currently Amended) The method of Claim [27] 26, wherein 

when the diagonal elements of the coefficient matrix C are denoted by mj (7=7,2, ...,n) 

and the inverses of the diagonal elements mi (7=7,2, ...,n) in the finite field GF(p) 
are denoted by 7, (7=7,2,. . . ,n), calculating the inverses of the diagonal elements 
of the coefficient matrix C th e diagonal e l e m e nt inv e rting m e ans includes 

(a) a multiplying unit for computing values / and U where 

n 

t i = Y[ m k (except Mi) m od p (i=l,2„ . . ,n) 

and 

n 

t -Y\ m k m odp 

k=l 

(b) a first inv e rting unit for computing value u where 
u=l/t mod p 

and 

(c) a s e cond inv e rting unit for computing values 7, where 
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Ii=uxt; mod p (i=l,2,...,n) 

to find the inverses (7=7,2, 
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29. (Currently Amended) The method of Claim 28, 

wherein the multiplying subst e p calculat e s computing the values t and ti includes 
calculating 

Si~mjxni2 modp 

S2 = Sjxms mod p 

s n -$=s n - 4 xm n -2 mod p 
in the stated order, then calculat e s calculating 
t n =s n .sxm n .i mod p 
t n -i=s n .3xm n modp 
s n =m n .jxm n mod p 
t n -2=s n - 4 xs n mod p 
s n -i=m n .2Xs n modp 

t n -3=Sn-5XSn-l mod p 

s n .2=m n .3xs n -i mod p 

t n .4=S n -6XSn-2 mod p 

S5=m4xs6 mod p 
t3=Sjxs5 modp 
$4~m3xs5 mod p 
t2-mjxs4 modp 
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ti=m2XS4 modp 

in the stated order, and lastly calculat e s calculating 

t=tjxrrij 

for a value j chosen from a set of positive integers {1,2, „.,n}. 

30. (Currently Amended) The method of Claim [26,] 25, wherein: 

generating the coefficient matrix C and the constant vector d of the system of linear 
equations Cx=d from the coefficient matrix A and the constant vector b of the 
system of linear equations Ax=b includes one or more successive transformation 
processes; 

the system of linear equations Ax=b is subjected to the first transformation process and 
the system of linear equations Cx-d is generated as a result of the last 
transformation process; 

in each transformation process, a coefficient matrix and a constant vector of a system of 
linear equations in n unknowns are transformed into a coefficient matrix and a 
constant vector of a system of linear equations in n unknowns that is equivalent to 
the system of linear equations before the transformation; 

in each transformation process, one pivotal equation which is a linear equation in n 
unknowns serving as a pivot for the transformation and one or more object 
equations which are linear equations in n unknowns to be transformed are chosen 
from the system of linear equations in n unknowns that is sub jected to the 
transformation; 

each transformation process has a coefficient group calculation process and a same 

number of transformation subprocesses as the one or more object equations, the 
transformation subprocesses being performed following the coefficient group 
calculation process and being each for transforming a separate one of the one or 
more object equations; 

in the coefficient group calculation process. 
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(a) a nonzero coefficient is chosen from each of the pivotal equation and the one 

or more object equations, a product is calculated for each of the pivotal 
equation and the one or more object equations by multiplying together all 
chosen nonzero coefficients except a nonzero coefficient chosen from the 
equation, and products calculated respectively for the pivotal equation and 
the one or more object equations are set into a first coefficient group, and 

(b) each of coefficients and a constant in the pivotal equation except a nonzero 

coefficient chosen from the pivotal equation in the coefficient group 
calculation process is multiplied by a product in the first coefficient group 
calculated for the pivotal equations, and values generated as a result of the 
multiplications are set into a second coefficient group; and 

in each transformation subprocess for transforming a separate one of the one or more 
object equations, 

(a) a nonzero coefficient chosen from the object equation in the coefficient group 

calculation process is changed to 0 as a new coefficient, 

(b) each of coefficients in the object equation except the nonzero coefficient 

chosen from the object equation is multiplied by a product in the first 
coefficient group calculated for the object equations, values in the second 
coefficient group calculated from the coefficients in the pivotal equations 
are subtracted respectively from values generated as a result of the 
multiplications on the coefficients in the object equation to generate 
differences, and the coefficients in the object equation are changed 
respectively to the differences as new coefficients, and 

(c) a constant in the object equation is multiplied by the product calculated for the 

object equations, a value in the second coefficient group calculated from 
the constant in the pivotal equation is subtracted from a value generated as 
a result of the multiplication on the constant in the object equation to 
generate a difference, and the constant in the object equation is changed to 
the difference as a new constant. 
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wher e in e ach transformation process includ e s a co e fficient group calculation proc e ss and 
transformation subproc e ss e s, p e rform e d following th e co e ffici e nt group 
calculation proc e ss, each for transforming a s e parat e on e of th e obj e ct e quations, 

wh e r e in in th e co e ffici e nt group calculation proc e ss 

(a) m nonz e ro co e ffici e nts ar e chos e n by taking on e nonz e ro co e ffici e nt from 

e ach of th e pivotal e quation and th e obj e ct e quations, e ach combination of 
(m - 1) of th e chos e n nonz e ro co e ffici e nts i s multipli e d, and th e m 
multiplication r e sults ar e s e t into th e first co e ffici e nt group, m b e ing a 
positive int e g e r no small e r than 2, and 

(b) e ach of a constant and n co e ffici e nts in th e pivotal e quation is multipli e d 

by a multiplication r e sult in th e first co e ffici e nt group for a combination of 
nonzero co e ffici e nts that does not includ e a nonz e ro co e ffici e nt chos e n 
from th e pivotal e quation, and n+1 valu e s obtain e d by th e multiplications 
ar e s e t into th e s e cond co e ffici e nt group, 

wh e r e in in e ach of th e transformation subproc e ss e s following th e co e ffici e nt group 
calculation proc e ss 

(a) a nonz e ro co e ffici e nt chos e n from th e obj e ct e quation in th e co e ffici e nt 

group calculation proc e ss i s chang e d to 0 in th e obj e ct e quation, and 

(b e ach of a constant and n coeffici e nts in th e obj e ct e quation is multipli e d by 

a multiplication r e sult in th e first co e ffici e nt group for a combination of 
nonz e ro co e ffici e nts that do e s not includ e th e nonz e ro co e ffici e nt chos e n 
from th e obj e ct e quation, and th e «+7 valu e s in th e s e cond co e ffici e nt 
group ar e subtract e d r e sp e ctiv e ly from th e n+7 multiplication r e sult s . 

3 1 . (Currently Amended) The method of Claim [30]26, wherein 

when the diagonal elements of the coefficient matrix C are denoted by m\ (i=l,2, ...,n) 

and the inverses of the diagonal elements m\ (i=l,2, ...,n) in the finite field GF(p) 
are denoted by 7, (7-7,2,. . . t n), calculating the inverses of the diagonal elements 
of the coefficient matrix C th e diagonal e lem e nt inv e rting m e ans includes 
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(a) 



a multiplying unit for computing values / and ft where 



n 



t i = Y\ m k ( exce Pt m i) m °d p (i—l 9 2,. . . ,n) 



and 



n 



t =Y\m k modp 



k=\ 



(b) a first inv e rting unit for computing a value u where 
u=l/t mod p 

and 

(c) a s e cond inv e rting unit for computing values // where 
Ii=uxti mod p (i=l,2, ...,n) 

to find the inverses (7=7,2, ...,n). 



32. (Currently Amended) The method of Claim 31, 

wherein th e multiplying s ubst e p calculat e s computing values / and ft involves calculating 
Sj=mjxm2 modp 
S2=S}xnt3 mod p 

s n -3^s n .4xm n .2 mod p 
in the stated order, then calculat e s calculating 
t n =s n .3xm n .i modp 
t„-i=s n -3xm n modp 
s n =m n .jxm n modp 

tn-2 = S n -4^S n mod p 

s n .}=m n „2xs n mod p 
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tnS^Sn.sXSn-l mod p 

s n .2=m n .3xs n -i modp 
t n .4=s n - 6 xSn-2modp 



S5=rri4XS6 modp 
h-Sixssmodp 
s^msxss modp 
t2=mjxs4 mod p 
ti=m2XS4 mod p 
in the stated order, and lastly calculat e s calculating 
t=tjxmj 

for a value j chosen from a set of positive integers {1,2, ...,n}. 
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